37 matches found
WordPress Newsletters plugin < 4.16 - Unauthenticated PHP Object Injection via Date Form Field vulnerability
Unauthenticated PHP Object Injection via Date Form Field vulnerability discovered by Sai Praneeth Koti in WordPress Plugin Newsletters versions 4.16...
Linux SoC audio buffer overflow DoS
The vulnerabilities in the sound/soc/stm/stm32sai.c and sound/soc/stm/stm32saisub.c modules, which support audio functions in SoC kernel of the Linux operating system, are related to errors during link counter updates. Exploiting these vulnerabilities can allow attackers to compromise the...
Malicious code in chai-as-sai (npm)
--- Credit: OpenSSF source...
MAL-2026-7239 Malicious code in chai-as-sai (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chai-as-sai (npm)
--- -= Per source details. Do not edit below this line.=-...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fixed the OF node leak during probe operations. The reference to the sync provider’s OF node during platform device probing is currently only dropped if the setsync callback fails during DAI probe. Make sure tha...
SUSE CVE-2025-71081
In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync provider OF node when probing the platform device is currently only dropped if the setsync callback fails during DAI probe. Make sure to drop the referen...
CVE-2025-71081
In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync provider OF node when probing the platform device is currently only dropped if the setsync callback fails during DAI probe. Make sure to drop the referen...
CVE-2025-71081 ASoC: stm32: sai: fix OF node leak on probe
In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync provider OF node when probing the platform device is currently only dropped if the setsync callback fails during DAI probe. Make sure to drop the referen...
CVE-2025-71081
The CVE-2025-71081 affects the Linux kernel ASoC: stm32 component (SAI) where the OF sync provider node reference was only dropped on a failed set_sync() during DAI probe. The fix ensures the reference is dropped on platform probe failures (e.g., probe deferral) and on driver unbind, preventing a...
CVE-2025-71081: Missing Release of Memory after Effective Lifetime
In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync provider OF node when probing the platform device is currently only dropped if the setsync callback fails during DAI probe. Make sure to drop the referen...
sai-isaac (>=0.0.6, <=0.0.7) potentially affected by CVE-2025-33210 via isaaclab (2.0.2)
isaaclab PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on isaaclab and may be impacted: - sai-isaac =0.0.6, =0.0.7 Source cves: CVE-2025-33210 Source advisory: SNYK:PYTHON-ISAACLAB-14459400...
sai-isaac (>=0.0.6, <=0.0.7) potentially affected by CVE-2025-33210 via isaaclab (2.0.2)
isaaclab PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on isaaclab and may be impacted: - sai-isaac =0.0.6, =0.0.7 Source cves: CVE-2025-33210 Source advisory: MEND:CVE-2025-33210...
EUVD-2025-136227
Malicious code in tanabufir-sai-dubatgifa npm...
EUVD-2025-135113
Malicious code in unimna-sai-acua npm...
EUVD-2025-135112
Malicious code in unimna-sai-acua npm...
MAL-2025-179328 Malicious code in unimna-sai-acua (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75bd9f93de9d85eed34bb80d55949e13b7fb48046c641aba5e2daa1ab951cc28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-170254 Malicious code in verify-ai-aisai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222ae743035d6f9b11b3e42d3795d9c7cb71dbdee9f887922c45bb52e8e9707b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malware in sai-tg-api
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...